Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/ef5e9be5-fa53-3793-bcf3-9d295e5438fa.roa
File: ef5e9be5-fa53-3793-bcf3-9d295e5438fa.roa (raw, json)
Hash identifier: mMvDHQf2MagO00C31JPtjsuJMbUdjYHC/K6ObwAFK9M=
Subject key identifier: AF:10:BE:F0:A2:A6:90:8D:76:B2:50:B0:63:96:48:28:81:09:61:A1
Certificate issuer: /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial: 010D0C9F4328583C8BCD456DF2A9AA16840DEC00
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/ef5e9be5-fa53-3793-bcf3-9d295e5438fa.roa
Signing time: Fri 07 Jan 2022 05:00:00 +0000
ROA not before: Fri 07 Jan 2022 05:00:00 +0000
ROA not after: Sun 14 Apr 2024 04:00:00 +0000
asID: 61317
IP address blocks: 165.140.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:8b:cd:45:6d:f2:a9:aa:16:84:0d:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Validity
Not Before: Jan 7 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2024 GMT
Subject: CN=2f4c2c30-ab77-4e5c-b069-275eab0a48e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b3:08:75:e4:ef:b8:41:47:29:61:14:30:70:
99:0a:31:77:49:17:6e:22:b3:18:a6:46:0f:e2:0f:
72:fe:fe:09:3a:d1:4d:71:5f:3c:1a:d0:ba:5c:70:
21:6a:a2:79:4e:04:9e:fb:54:e1:d8:15:67:57:5f:
20:5b:70:89:48:25:32:04:5e:36:f6:c7:ea:21:20:
dd:a8:c9:f9:7f:f2:4f:d2:7c:1c:0c:4a:05:ea:ef:
e5:d5:56:3d:79:bb:06:e8:d0:b0:2a:0f:a8:78:09:
93:10:59:a7:2c:ba:cd:57:89:37:5b:1c:e8:a3:f1:
a0:9f:e9:33:d9:b9:fb:c8:08:e8:8f:5b:ee:f5:44:
b5:9b:a4:aa:c1:a6:eb:79:cb:01:a1:c2:27:be:fb:
7b:fc:09:04:48:08:de:47:4d:86:a8:c7:12:c9:07:
8b:18:6d:7b:c3:7b:23:aa:14:27:d7:74:2b:9d:a2:
81:39:e6:6a:c0:f9:e7:4d:11:5a:35:cd:e3:b5:6e:
cb:26:d7:9c:47:2b:77:4e:6d:35:35:ba:35:c5:4e:
8b:f1:46:b3:88:74:b3:66:c2:b0:04:b5:9b:68:61:
5b:fd:07:27:fa:81:84:3e:d7:55:0c:98:78:0f:11:
44:51:4c:ce:29:83:e6:6c:e4:25:37:95:72:bd:db:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:10:BE:F0:A2:A6:90:8D:76:B2:50:B0:63:96:48:28:81:09:61:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/ef5e9be5-fa53-3793-bcf3-9d295e5438fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl
X509v3 Authority Key Identifier:
keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:a5:75:9a:1e:2e:86:28:21:7c:07:b7:b5:ee:04:b2:b6:4e:
fb:5a:b9:2e:88:01:5d:d9:30:7e:22:52:32:f2:c5:bb:fe:b6:
63:af:55:32:4e:e3:b8:5a:40:b1:c5:ba:e4:eb:f5:20:cb:05:
95:3a:f5:1a:1a:22:e0:46:8d:e1:6f:4d:8d:6b:ed:85:1e:72:
f2:7b:5e:e8:fa:1c:54:f7:31:5e:05:0e:5e:70:94:dc:2d:16:
12:8e:1a:ea:86:51:fc:b9:31:0a:f6:8c:33:bf:a1:1a:4c:b0:
f6:e4:4e:09:c8:c8:07:24:eb:e3:cc:94:77:3c:c4:14:4f:e5:
23:d6:79:28:8d:0d:ee:07:9a:12:cc:88:06:40:86:a0:8d:03:
de:d3:25:57:50:5a:f0:ff:2c:99:2a:53:3b:ef:c5:06:5e:5e:
45:00:92:67:1a:c4:a7:df:24:f9:05:be:fe:a4:ad:8e:cb:0e:
4c:b1:f0:a6:49:d2:41:f9:f6:1d:93:81:95:9a:65:eb:0a:d0:
6e:75:6c:cc:e0:ee:d9:f6:7a:83:e1:0a:89:d5:c3:8c:35:94:
0f:87:47:2c:63:e5:61:f4:4c:2b:7c:a3:81:d8:f3:64:a8:01:
53:66:c7:13:f6:b4:26:a5:d3:25:a4:d2:4a:03:26:c2:88:94:
11:f8:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:22:34 2025 by rpki-client